Computing prime factors with a Josephson phase qubit quantum processor 
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A quantum processor (QuP) can be used to exploit quantum mechanics to find the prime factors 
of composite numbers 1 . Compiled versions of Shor's algorithm have been demonstrated on ensem- 
ble quantum systems 2 and photonic systems [3 - 5 , however this has yet to be shown using solid 
state quantum bits (qubits). Two advantages of superconducting qubit architectures are the use of 
conventional microfabrication techniques, which allow straightforward scaling to large numbers of 
qubits, and a toolkit of circuit elements that can be used to engineer a variety of qubit types and 
interactions [6l [7] • Using a number of recent qubit control and hardware advances [7HT3], here we 
demonstrate a nine-quantum-element solid-state QuP and show three experiments to highlight its 
capabilities. We begin by characterizing the device with spectroscopy Next, we produces coherent 
interactions between five qubits and verify bi- and tripartite entanglement via quantum state to- 
mography (QST) [8l 1121 [T4l 115] . In the final experiment, we run a three-qubit compiled version of 
Shor's algorithm to factor the number 15, and successfully find the prime factors 48% of the time. 
Improvements in the superconducting qubit coherence times and more complex circuits should pro- 
vide the resources necessary to factor larger composite numbers and run more intricate quantum 
algorithms. 



In this experiment, we scaled-up from an architec- 
ture initially implemented with two qubits and three res- 
onators [7] to a nine-element quantum processor (QuP) 
capable of realizing rapid entanglement and a compiled 
version of Shor's algorithm. The device is composed 
of four phase qubits and five superconducting coplanar 
waveguide (CPW) resonators, where the resonators are 
used as qubits by accessing only the two lowest levels. 
Four of the five CPWs can be used as quantum mem- 
ory elements as in Ref. [7] and the fifth can be used to 
mediate entangling operations. 

The QuP can create entanglement and execute quan- 
tum circuits mi [17] with high-fidelity single-qubit gates 
(X, y, Z, and iJ), [13 ,1^ combined with swaps and 
controlled-phase (C^) gates [3 [131 120], where one qubit in- 
teracts with a resonator at a time. The QuP can also uti- 
lize "fast-entangling logic" by bringing all participating 
qubits on resonance with the resonator at the same time 
to generate simultaneous entanglement [21 . At present, 
this combination of entangling capabilities has not been 
demonstrated on a single device. Previous examples have 
shown: spectroscopic evidence of the increased coupling 
for up to three qubits coupled to a resonator [14 , as well 
as coherent interactions between two and three qubits 
with a resonator [12 , although these lacked tomographic 
evidence of entanglement. 

Here we show coherent interactions for up to four 
qubits with a resonator and verify genuine bi- and tripar- 
tite entanglement including Bell [9 and |W)-states [10^ 
with quantum state tomography (QST). This QuP has 
the further advantage of creating entanglement at a rate 
more than twice that of previous demonstrations [TOl [T2] . 

In addition to these characterizations, we chose to im- 
plement a compiled version of Shor's algorithm [22| [23] . 
in part for its historical relevance [T6^ and in part because 



this algorithm involves the challenge of combining both 
single- and coupled-qubit gates in a meaningful sequence. 
We constructed the full factoring sequence by first per- 
forming automatic calibration of the individual gates and 
then combined them, without additional tuning, so as to 
factor the composite number N = 15 with co-prime a = 4, 
(where 1 < a < and the greatest common divisor be- 
tween a and N is 1). We also checked for entanglement 
at three points in the algorithm using QST. 

Figure [T^ shows a micrograph of the QuP, made on 
a sapphire substrate using Al/AlOa^/Al Josephson junc- 
tions. Figure shows a complete schematic of the de- 
vice. Each qubit Qi is individually controlled using a bias 
coil that carries dc, rf- and GHz-pulses to adjust the qubit 
frequency and to pulse microwaves for manipulating and 
measuring the qubit state. Each qubit's frequency can be 
adjusted over an operating range of 2 GHz, allowing us 
to couple each qubit to the other quantum elements on 
the chip. Each Qi is connected to a memory resonator 
Mi, as well as the bus B, via interdigitated capacitors. 
Although the coupling capacitors are fixed, Fig.[T]3 illus- 
trates how the effective interaction can be controlled by 
tuning the qubits into or near resonance with the cou- 
pling bus (coupling "on") or detuning Qi to ±500 MHz 
(coupling "off")[24 . 

The QuP is mounted in a superconducting aluminum 
sample holder and cooled in a dilution refrigerator to 
~ 25 mK. Qubit operation and calibration are similar 
to previous works f7]- [Tm [T3],with the addition of an au- 
tomated calibration process [25]. As shown in Figjlji, we 
used swap spectroscopy [7] to calibrate all nine of the en- 
gineered quantum elements on the QuP, the four phase 
qubits (Qi — Q4), the four quarter- wave CPW quantum 
memory resonators (Mi — M4), and one half- wave CPW 
bus resonator (B). The coupling strengths between Qi 
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FIG. 1: Architecture and operation of the quantum pro- 
cessor (QuP). a, Photomicrograph of the sample, fabricated 
with aluminum (colored) on sapphire substrate (dark), b, 
Schematic of the QuP. Each phase qubit Qi is capacitively 
coupled to the central half- wavelength bus resonator B and a 
quarter- wavelength memory resonator Mi. The control lines 
carry GHz microwave pulses to produce single qubit oper- 
ations. Each Qi is coupled to a superconducting quantum 
interference device (SQUID) for single-shot readout, c, Illus- 
tration of QuP operation. By applying pulses on each control 
line, each qubit frequency is tuned in and out of resonance 
with B (M) to perform entangling (memory) operations, d. 
Swap spectroscopy [7 for all four qubits: Qubit excited state 
|e) probability Pe (color scale) versus frequency (vertical axis) 
and interaction time At. The centers of the chevron pat- 
terns gives the frequencies of the resonators B, Mi — M4, 
/ = 6.1, 6.8, 7.2, 7.1, 6.9 GHz respectively. The oscillation pe- 
riods give the coupling strengths between Qi and B (Mi), 
which are all ^ 55 MHz (^ 20 MHz). 



and B (Mi) were measured to be within 5% (10%) of 
the design values. 

The qubit-resonator interaction can be described by 
the Jaynes-Cummings model Hamiltonian[26 Hint = 
^•(%i/2)(a'''cr^~+acr^^), where gi is the coupling strength 
between the bus resonator B and the qubit Qi, and 
a are respectively the photon creation and annihila- 
tion operators for the resonator, and a~ are respec- 
tively the qubit Qi raising and lowering operators, and 
h = h/27r. The dynamics during the interaction between 
the i = {1, 2, 3, 4} qubits and the bus resonator are shown 
in Fig{T]3, and Fig|2]a, b, c respectively. 

For these interactions the qubits Qi — Q4 are initialized 
in the ground state \gggg) and tuned off-resonance from 
B at an idle frequency / ~ 6.6 GHz. Qi is prepared in 
the excited state |e) via a 7r-pulse. B is then pumped 
into the first Fock state n = 1 by tuning Qi on resonance 
(/ ~ 6.1GHz) for a duration l/2^i = r ~ 9ns, long 
enough to complete an iSWAP operation between Qi and 
B, |O)0|e^^^) ^ \l)^\gggg) [8. 

The participating qubits are then tuned on resonance 
(/ ~ 6.1 GHz) and left to interact with B for an interac- 
tion time At. Figures[2]a,b,c show the probability Pq. of 
measuring the participating qubits in the excited state, 
and the probability Pb of B being in the n = 1 Fock 
state, versus Ar. At the beginning of the interaction the 
excitation is initially concentrated in B {Pb maximum) 
then spreads evenly between the participating qubits {Pb 
minimum) and finally returns back to B, continuing as a 
coherent oscillation during this interaction time. 

When the qubits are simultaneously tuned on reso- 
nance with B they interact with an effective coupling 
strength gN that scales with the number N of qubits 
as V^[14 , analogous to a single qubit coupled to a 
resonator in a n-photon Fock state [8 . For N qubits, 
Sn = VNg, where g = [l/A/'(E.Ji,iv The 
oscillation frequency of Pb for each of the four cases 
i = {1,2,3,4} is shown in Figj2]d. These results are 
similar to Ref . [M] , but with a larger number N of qubits 
interacting with the resonator, we can confirm the \/]V 
scaling of the coupling strength with N. From these data 
we find a mean value of ^ = 56.5 ± 0.05 MHz. 

By tuning the qubits on resonance for a specific inter- 
action time r, corresponding to the first minimum of Pb 
in Fig.^, b, we can generate Bell singlets {ips) = (l^e) — 
|e^))/72 and |W) states |W) = {\gge)^\geg)^\egg))/V3. 
Stopping the interaction at this time {tbcU = 6.5 ns 
and Tw = 5.1ns) leaves the single excitation evenly dis- 
tributed among the participating qubits and places the 
qubits in the desired equal superposition state similar to 
the protocol in Ref. [12 . We are able to further analyze 
these states using full QST. Figures[2^, f show the recon- 
structed density matrices from this analysis [1 5 . The Bell 
singlet is formed with fidelity FbcU = {i^sl PBeii IV^s) = 
0.89 ± 0.01 and entanglement of formation [2 7 EOF = 
0.70. The three-qubit |W) state is formed with fidelity 
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FIG. 2: Rapid entanglement for two to four-qubits. Panels a,b,c show the measured state occupation probabilities Pqi_4 (color) 
and (black) for increasing number of participating qubits N — {2,3,4} versus interaction time At. In all cases B is first 
prepared in the n = 1 Fock state [8] and the participating qubits are then tuned on resonance with B for the interaction time At. 
The single excitation begins in B, spreads to the participating qubits, and then returns to B. These coherent oscillations continue 
for a time At and increase in frequency with each additional qubit. d. Oscillation frequency of Pb for increasing numbers 
of participating qubits. The error bars indicate the — 3dB point of the Fourier transformed Pb data. The inset schematics 
illustrate which qubits participate. The coupling strength increases as = V^^, plotted as a black line fit to the data, with 
g = 56.5 ±0.05 MHz. e,f The real part of the reconstructed density matrices from QST. (e). Bell singlet \ips) = {\ge) — \eg))/V^ 
with fidelity Fsen = {"ips] PBeii = 0.89±0.01 and EOF = 0.70. (f), Three-qubit |W) = (|^^e) + |^e^) + |e^^))/\/3 with fidelity 
Fw = {W\ pw |W) = 0.69 =b 0.01. The measured imaginary parts (not shown) are found to be small, with (e) |Imp^J < 0.05 
and (f) |Imy9w| < 0.06, as expected theoretically. 



Fw = {W\ Pw |W) = 0.69 ± 0.01, which satisfies the en- 
tanglement witness inequality Fw > 2/3 for three-qubit 
entanglement [28 . Generating either of these classes of 
entangled states (bi- and tri-partite) requires only a sin- 
gle entangling operation that is short relative to the char- 
acteristic time for two-qubit gates {tg ~ 50 ns). This 
entanglement protocol has the further advantage that it 
can be scaled to an arbitrary number of qubits. 

The quantum circuit for the compiled version of Shor's 
algorithm is shown in Fig. [3^ for factoring the number 
N = lb with a = 4 co-prime [22l [23], which returns the 
period r = 2 ("10" in binary) with a theoretical suc- 
cess rate of 50%. Although the success of the algorithm 
hinges on quantum entanglement, the final output is ide- 
ally a completely mixed state, am = (1/2)(|0)(0|+|1)(1|). 
Therefore, measuring only the raw probabilities of the 
output register does not reveal the underlying quantum 
entanglement necessary for the success of the computa- 
tion. Thus, we perform a runtime analysis with QST 
at the three points identified in Figj3]3, in addition to 
recording the raw probabilities of the output register. 

The first breakpoint in the algorithm verifies the ex- 
istence of bipartite entanglement. A Bell-singlet \ips) 
is formed after a Hadamard-gate {H) [19] on Q2 and 



a Controlled-NOT (CNOT) [71 [13] between Q2 and Q3. 
Figure|3]i, is the real part of the density matrix recon- 
structed from QST on l?/^^). The singlet is formed with 
fidelity FBeii = {^slPBeii \^s) = 0.75 ± 0.01 (llmp^J < 
0.05 not shown) and entanglement of formation EOF = 
0.43[29 . 

The algorithm is paused after the second CNOT gate 
between Q2 and Q4 to check for tripartite entanglement. 
At this point a three-qubit |GHZ) = {\ggg) + |eee))/>/2, 
with fidelity Fghz = {GHZ\ pcHZ |GHZ) = 0.59 ± 0.01 
(|ImpGHz| < 0.06 not shown) is formed between Q2, Q3, 
and Q4 as shown in Figj3^. This state is found to satisfy 
the entanglement witness inequality, Fghz > 1/2 [28] 
indicating three-qubit entanglement. 

The third step in the runtime analysis captures all 
three qubits at the end of the algorithm, where the fi- 
nal i^-gate on Q2, rotates the three-qubit |GHZ) into 
\i^3) = H2 |GHZ) = Qggg) + \egg) + \gee) - |eee))/2. Fig- 
ure[3]F is the real part of the density matrix with fidelity 
F = (^sl P3 \ip3) = 0.54±0.01. From the three-qubit QST 
we can trace out the register qubit to compare with the 
experiment where we measure only the single qubit reg- 
ister and the raw probabilities of the algorithm output. 
Ideally, the algorithm returns the binary output "00" or 
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FIG. 3: Compiled version of Shor's algorithm, a, Four-qubit circuit to factor N = 15, with co-prime a = 4. The three steps in 
the algorithm are initialization, modular exponentiation, and the quantum Fourier transform, which computes a^mod(N) and 
returns the period r = 2. b, "Recompiled" three-qubit version of Shor's algorithm. The redundant qubit Qi is removed by 
noting that HH = I. Circuits a and b are equivalent for this specific case. The three steps of the runtime analysis are labeled 
1,2,3. c, CNOT gates are realized using an equivalent controlled-Z (Cz) circuit, d. Step 1: Bell singlet between Q2 and Q3 
with fidelity, Fseii = {ips\ pBeii \i^s) = 0.75 ±0.01 and EOF = 0.43. e. Step 2: Three-qubit |GHZ) = {\ggg) + \eee))/V2 between 
Q2, Qs, and Q4 with fidelity Fqhz — {GHZ\ pcHZ |GHZ) = 0.59 =b 0.01. f. Step 3: QST after running the complete algorithm. 
The three-qubit |GHZ) is rotated into \ip3) = H2 |GHZ) = {\ggg) + \egg) + \gee) - |eee))/2 with fidelity, F = 0.55. g,h The 
density matrix of the single-qubit output register Q2 formed by: (g), tracing-out Q3 and Q4 from f, and (h) directly measuring 
Q2 with QST, both with F = y/pam y/p = 0.92 ± 0.01 and Sl = 0.78. From 1.5 x 10^ direct measurements the output register 
returns the period r = 2, with probability 0.483 ± 0.003, yielding the prime factors 3 and 5. (i). The density matrix of the 
single-qubit output register without entangling gates, H2H2 \g) = ^Id)- The algorithm fails and returns r = 100% of the 
time. Compared to the single quantum state \ipout) = 1^'), the fidelity Fcheck = {ipg\ pcheck I'ipg) = 0.83 ±0.01, which is less than 
unity due to the energy relaxation. 



"10" (including the redundant qubit) with equal proba- 
bility, where the former represents a failure and the latter 
indicates the successful determination of r = 2. We use 
three methods to analyze the output of the algorithm: 
Three-qubit QST, single-qubit QST, and the raw proba- 
bilities of the output register state. Figures|3^, h are the 
real part of the density matrices for the single qubit out- 
put register from three-qubit QST and one-qubit QST 
with fidelity F = ./pam^/p = 0.92 ± 0.01 for both den- 
sity matrices. From the raw probabilities calculated from 
150,000 repetitions of the algorithm, we measure the out- 
put "10" with probability 0.483 ± 0.003, yielding r = 2, 
and after classical processing we compute the prime fac- 
tors 3 and 5. 

The linear entropy Sl =4[1— Tr(p^)]/3is another met- 
ric for comparing the observed output to the ideal mixed 



state, where Sl = ^ for a completely mixed state[30]. We 
find Sl = 0.78 for both the reduced density matrix from 
the third step of the runtime analysis (three-qubit QST), 
and from direct single-qubit QST of the register qubit. 

As a final check of the requisite entanglement, we run 
the full algorithm without any of the entangling oper- 
ations and use QST to measure the single-qubit output 
register. The circuit reduces to two i^-gates separated by 
the time of the two entangling gates. Ideally Q2 returns 
to the ground state and the algorithm fails (returns "0" ) 
100 % of the time. Figurejs} is the real part of the density 
matrix for the register qubit after running this check ex- 
periment. The fidelity of measuring the register qubit in 
1^) is Fcheck = {g\ Pcheck \g) = 0.83 ±0.01. The algorithm 
fails, as expected, without the entangling operations. 

In conclusion, we have implemented a compiled ver- 
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sion of Shor's algorithm on a QuP that correctly finds 
the prime factors of 15. We showed that the QuP can 
create Bell states, both classes of three-qubit entangle- 
ment, and the requisite entanglement for properly execut- 
ing Shor's algorithm. In addition, we produce coherent 
interactions between four qubits and the bus resonator 
with a protocol that can be scaled to create an iV-qubit 
|W) state, during which we observe the \/N dependence 
of the effective coupling strength with the number N of 
participating qubits. These demonstrations represent an 
important milestone for superconducting qubits, further 
proving this architecture for quantum computation and 
quantum simulations. 
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